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CREATING EXPIRING COPIES IN A CHECK-OUT/CHECK-IN SYSTEM 

This application claims the benefit of U.S. provisional patent application 
60/425,843, filed 4 March 2003, Attorney Docket US020438P. 

5 

TECHNICAL FIELD 
This invention relates to the field of consumer devices, and in particular to 
techniques for preventing or discouraging the illicit duplication of copy protected material. 

10 BACKGROUND ART 

Techniques are continually being proposed and developed to prevent or discourage 
the illicit duplication of copy-protected material, such as commercial music recordings. 
These techniques generally attempt to limit tiie number of copies that can be made fi-om a 

1 5 legitimate copy of the copy-protected material. At the same time, the purchaser of this 
legitimate copy expects to have unlimited rights for copying this material for his or her 
private purposes. For example, the typical purchaser has access to multiple means for 
playing and recording the material, and e?q>ects to be able to play the purchased material on 
each of these means, without constraints. 

20 Increasingly common in the art is the use of flash memory cards to record content 

material for playback on small portable devices. These flash memory cards, or similar 
electronic memory devices, have an advantage over conventional recording media such as 
discs or tapes, in tibiat they contain no moving parts and are thus more reliable and robust 
Similarly, the playback devices for these memory cards need not contain movement 

25 mechanisms and are therefore also more reliable, robust, and, in general, less expensive 
than conventional players. The electronic memory devices and corresponding players are 
also generally much smaller than conventional discs or tapes and corresponding players, 
and generally consume less power, further increasing their suitability for use as portable 
playback systems. 
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The availability of small, inexpensive media for copying copy-protected material 
pr^ents a number of potential problems as the rights of the provide of the copy-protected 
material are balanced with the rigjits of the purchaser of the copy-protected material. 
Because the medium is small, and intended for highly portable q^plications, the likelihood 
S of the medium being lost, damaged, or misplaced is high. As such» the purchaser will 
expect to be able to rqproduce the content material as often as required to replace the lost, 
dama^, or misplaced copies. Contrarily, because the media is inexpensive, the likelihood 
of an illicit mass reproduction of the content material is high, and the provider of the 
material will expect to be able to prevent such an illicit mass reproduction. 

10 One method for limiting the ability to copy the content material is a "check- 

out/check-in" system. In this, as in other protection schemes presented herein, it is assumed 
that the copying and playback devices are "conforming" devices, in that they conform to 
the standards used to protect copy-protected material. When a copy of the material is made 
from a providing device to a portable medium, the conforming providing device prevents 

15 additional copies beyond a given limit from being made until the portable medium 

containing the copy is returned to the providing device. That is, the check-out/check-in 
system provides a "one-at-a-time", or an "at-most-N-at-a-time", copy scheme to limit the 
number of simultaneoxisly available copies of protected content material. This scheme has 
a number of drawbacks: if the portable copy is lost, damaged, or misplaced, it caimot be 

20 "returned" to the providing device, and subsequent other copies cannot be made. Also, the 
"annoyance" factor of having to check copies back in to the system from which the copy 
was made will adversely ajSect consumer acceptance of this protection scheme. 

DISCLOSURE OF INVENTION 

25 It is an object of this invention to provide a copy protection method and system that 

limits die number of contemporaneously available copies of protected content material. It 
is a further object of this invention to provide a copy protection method and system that 
does not necessarily require a return of issued copies of the protected content material to 
enable the creation of additional copies. 

30 These objects, and others, are achieved by a check-in/check-out system and method 

tfiat creates limited-duration copies of protected content material. The system is configured 
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to allow up-to-N contemporaneoiis copies of the protected content material. A controller 
maintains a log of the copies currently outstanding, and their expiration times, after which 
time a conforming rendering device will cease to render the material of this expired copy. 
When a copy is returned, the entry in the log is deleted. If a copy is not returned to the 
5 system before its expiration time, the system is configure to also delete its entry from the 
log, thereby allowing another copy to be made to replace the expired copy, even though the 
expired copy has not been returned. 



BRffiF DESCRIPTION OF THE DRAWINGS 
10 FIG. 1 illustrates an example block diagram of a check-in/check-out system in accordance 
with this invention. 

FIG. 2 illustrates an example flow diagram of a check-in/check-out system in accordance 
with this invention. 

Throughout the drawings, the same reference numeral refers to the same element, or an 
1 5 elemrat that performs substantially the same function. 

BEST MODE FOR CARRYING OUT THE INVENTION 
FIG. 1 illustrates an example block diagram of a check-in/check-out system 100 in 
accordance with this invention. The overall function of the system 100 is to allow ttie 

20 creation of up-to-N contemporaneously accessible copies 102 of source material 101. 
Although the source 101 and copy 102 are illustrated as CDs, tibe media can be a CD, 
DVD, memory sticks, magnetic disks, or any storage device that is suitable for containing 
the content matoial of the source 101. 

The sj^tem 100 includes a controller ISO that is configured to control a copy device 

25 140 that effects the copying of the source material 101 to the copy 102. The controller 150 
maintains a log 1 10 corresponding to each source material 101, to determine whether to 
enable the copy device 140 for making each copy. In accordance wifli this invention, the 
log 1 10 includes an identification of each copy 102 and an miration time associated with 
each copy 102. From this log 1 10, a count of the number of currently issued copies of each 

30 source 101 can be determined. As discussed further below, when a copy is made, an entry 
is made in the log, increasing the count by one; when a copy is returned or expires, the 
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entry is removed from the log, decreasing die count by one. As would be evident to one of 
ordinary skill in the art, a separate, albeit redundant, counter can be maintained to hold this 
count, to expedite processing. 

The controller 150 is configured to oiable a maridng device 130 to provide a 
marking to the copied material 102, via die copy device 140. Preferably, die marking is a 
Vatemiark' that is indelibly added to die content material in such a way fliat die presence 
of the watermark do^ not noticeably affect the rendraing of die material. Any of a variety 
of techniques are available in the art for creating and reading watermarks. Alternatively, 
die maiking could be information added to a particular segment of the material, such as an 
entry in die table of contents of a CD or DVD, or an entry at a predefined memory location 
in a memory stick or ROM. In accordance with this invention, the marking optionally 
includes a mark diat indicates tiie expiration time for this copied material. The term 
•optionally* is used in that if a copy 102 does not have an expiration time, the inclusion of 
this null-expiration in the maiking is optional. 

In accordance with this invention, conforming rendering systems will be configured 
to detect die expiration time marking, if any, and will prevent die rend»ing of the content 
material from die copy if die authorization time has expired. Note diat die correspondence 
of "time" between the copying system and the rendering system may not be one-to-one. 
For example, the expiration time may explicidy include die audiorization-duration, and the 
"coimt-down" of the authorization may not commence until die first rendering of the 
copied material at the rendering system. In like manner, a portable rendering device may 
not be configured to m ai nta i n an active real-time clock, due to power constraints. la such 
an «nbodiment, a defindt "usage rule" may be used to correlate an expiration time at a 
source system with a usage-coimt at a rendering device. For example, an authorization 
duration often days may be translated to a usage-count of twenty renderings of the copied 
material, and the conforming rendering system is configured to prevent rendering of die 
copied material more dian twenty times whoi presented an expiration duration often daj^. 
la each of diese example embodunents, die actual expiration of ri^ts to access the copied 
material at the conforming rendering system may be sooner-dian or later-than the 
expuation time that is recorded in die log. This lack of one-to-one timing correspondence 
between die source device and die rendoing devices has limited short-tem effects. The 
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overall effect is that some or all of the copied material has a limited useful authorization 
time, and the controller 1 SO is configured to elimmate the effects of having made tfie 
copied material after a determined expiration time. 

In a preferred embodiment of this invention, the user of the system 100 defines a 
S 'default* authorization-duration that is combined with the contents of a timer 120 to 
determine the e?q)iration time, and is also given the option of overriding the de&ult for 
particular copies 102. For example, a user who regularly downloads content material to 
portable memory sticks may set the default autiiorization-duration to three months, but may 
override this setting when creating a CD, to set a much longer authorization-duration. 

10 Optionally, the system 100 can be configured to allow for multiple default authorization- 
durations, depending upon the media 102, or other factors. 

The marking may also include other material that facilitates copy control of 
protected material. Copending U.S. patent application "REGISTERING COPY 
PROTECTED MATERIAL IN A CHECK-IN. CHECK-OUT SYSTEM", serial number 

15 09/548,728, filed 13 April 2000 for Michael Epstein, Attorney Docket PHA 23,671, 

discloses a marking that is used in a device-specific challenge-response protocol, to assure 
that the media that received the copied material is the same media that is used to check the 
material back in, and is included by reference herein. 

The controller 150 also manages the return, or check-in, of copied material 102. 

20 When the copied material 102 is returned, the controller identifies the source 101 of this 
material, removes the entry in the log associated with this source 101 and copy 102, and 
removes or other disables the contents &om the copy 102. In accordance with this 
invention, the expiration of the authorization-duration of a copy 102 also effects a removal 
of the corresponding entry &om the log. 

25 

FIG* 2 illustrates an example flow diagram of a check-in/check*out system in 
accordance with this invention. At the start of each invocation of the system 201, the log is 
updated to delete any entries in the log for copies that have expired, so that the current 
count of outstanding non-expired copies is up to date. At 210, a request is received, either 
30 to create a copy of source material, or to return a previously made copy. If the request is to 
create a copy, die requested source is identified, at 220. If, at 225, the current count of 
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outstanding non-expired copies for the requested source is already at the maximum 
allowable^ N, based on the current entries in the log for this source, the request to make an 
additional copy is refused, at 228. 

If the current count is less than N, this copy is authorized, and the expiration time 
5 for this copy is determined, at 230. As noted above, a default authorization-duration time is 
preferably available, so tfiat the copying can occur with minimal user intervention. 
Altematively, the user can include a specific authorization-duration time in the copy 
request, or the system can prompt the user for the desired authorization-duration time. The 
user has the option of declaring an infinite authorization-duration time, so that no 
10 expiration time is defined. By doing so, however, the user runs the risk of eventually 
consuming all of the user's authorizations, if the user misplaces the copies, or the copies 
become damaged. 

The log for this source material is updated to reflect the creation of this copy and its 
expiration time, if any, at 240, and a copy of the source material is created^ at 250, with 

1 5 appropriate security markings, including the expiration time, if any. 

If, at 210, the request is to return a copy of the content material, the identity of the 
copy and its source is determined, at 260. As noted above, security procedures are 
preferably invoked to assure the identity of the copy, to prevent bogus or repeated returns. 
At 265, the log is searched to find this copy of the source material. If an entry is found that 

20 coiresponds to this copy, the entry is removed firom the log, at 270. If this copy had 

expired, and the log had been updated at 201 during this request or a prior request, an entry 
for this copy would no longer appear in ttie log, and the deletion at 270 is skipped. At 280, 
the content material is erased firom the media of the copy, or ofiierwise marked as being 
unauthorized for subsequent rendering. 

25 

The foregoing merely illustrates the principles of the invention. It will thus be 
appreciated that those skilled in the art will be able to devise various anangements which, 
although not explicitly described or shown herein, embody the principles of the invention 
and are thus within its spirit and scope. For example^ the particular fomti of the fimctions 
30 described above need not be identical to those illustrated. Particularly, the term "log" is 
used in its general sense, and can be embodied as a database, an index table, a linked list. 
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and so on. A deletion from the log can include any activity that eliminates the effects of 
having made the entry in the log. For example, if the log serves purposes other than 
keeping track of expiration times, a flag can be used within the log to indicate whether 
each copy should be considered when determining whether to make another copy, and this 
5 flag can be cleared upon return of the copied material or upon expiration of the authorized 
time. In like manner, if the material is being returned during a request to make a new copy 
of the material with a later expiration time, one of ordinary skill in the art will recognize 
that the erasure step 280 and copy step 250 can be skipped, and the expiration time in the 
log can merely be updated. Similarly, if the material is being returned during a request to 
1 0 make a copy of different material, and the new material will overwrite the returned 

material, the erasure step 280 can be skipped. These and other system configuration and 
optimization features will be evident to one of ordinary skill in the art in view of this 
disclosure, and are included within the scope of the following claims. 
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CLAIMS: 

1 . A copy protection system, comprising: 

a controller, operably coupled to a copy device, that is configured to maintain a log 
of prior copies of the source material, and to control the copy device d^endent upon 
contents of the log, and 

a marker device, operably coupled to the controller and the copy device^ that is 
configured to attach an information item to one or more of the prior copies, 

wherein 

the information item includes an expiration time associated with each of the one or 
more of the prior copies, and 

the log includes the expiration time associated with each of the one or more prior 
copies, and 

the controller is configured to eliminate one or more effects of having made at least 
one copy of the one or more of the prior copies after an expiration of the expiration time 
associated with the at least one copy. 

2. The copy protection system of clafan 1 , wherein 

the log includes an identifier of the source material, and 

flie controU^ is configured to limit a total number of copies of tfie source material, 
based on the contents of the log. 

3. The copy protection system of claim 1, wherein 

the controller is fiirther configured to: 

erase a retumed copy of the one or more prior copy, and 
eliminate one or more effects of having made the retumed copy. 

4. The copy protection system of claim 3, wherein 

the controller is configured to eliminate the one or more effects of having made the 
retumed copy via a modification of the log corresponding to the retumed copy. 



8 



US020438 




5. The copy protection system of claim 4, wherein 

the controller is configured to eliminate the one or more effects of having made the 
at least one copy after the expiration of the expiration time via a modification of the log 
corresponding to the at least one copy. 

6. The copy protection system of claim 1» wherein 

the controller is configured to eliminate the one or more effects of having made the 
at least one copy after the expiration of the expiration time via a modification of the log 
corresponding to the at least one copy. 

7. The copy protection system of claim 1» further including 

the copy device. 
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8. A method of controlling a creation of copies of source material, comprising: 

maintaining a log of each copy of the source material, wherein the log includes an 
expiration time associated with at least one copy of the source material, 

creating a new copy of the soiu^ce material only if the log indicates that a total 
number of outstanding copies of the source material is below a given limit, 

updating the log after the expiration time of the at least one copy has expired, so 
that the at least one copy is not included in the total number of outstanding copies of the 
source material after the expiration time of the at least one copy has expired 

9. Hie method of claim 8, further including 

updating the log when an identified copy of the source is returned, so (hat the 
identified copy is not included in the total number of outstanding copies of the source 
material after the identified copy is returned. 

10. The mediod of claim 9, further including 

using a secure method of identifymg the identified copy of the source. 
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CREATING EXPIRING COPIES IN A CHECK-OUT/CHECK-IN SYSTEM 

ABSTRACT 

A check-in/check-out system (100) and method creates limited-duratioa copies of 
protected content material (101). The system is configured to allow up-to-N 
5 contemporaneous copies (102) of the protected content material. A log (1 10) maintains a 
record of the copies cuirently outstanding, and their expuration times, after which time a 
conforming rendering device will cease to render the matmal of this expired copy. When a 
copy is returned, the entry in the log is deleted (270). If a copy is not returned to tiie syst^ 
(100) before its expiration time, the system is configure to also delete its entry from the log 
10 (201), thereby allowing another copy to be made (250) to replace the expired copy, even 
though the expired copy has not been returned. 
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